medium
Single Answer
Which of the following is not a managerial control?
Answer Options
A
Risk assessments
B
Including security in change management processes
C
Security planning exercises
D
Implementing firewalls
Correct Answer: D
Explanation
Firewalls are a technical control, not a managerial control that focuses on the mechanics of the risk management process.